Network security and performance monitoring solutions entries

1投入力度、 Information security solutions

With the advent of the era of big data, the production network of enterprises is becoming more and more complex, and the business is increasingly dependent on the network. Some industries, such as finance, manufacturing and government, have high requirements for the network security of production and office environment. For such customers, daily network security risk monitoring and active troubleshooting are particularly important. As a network fault diagnosis expert, fluke network has launched an enterprise level information security solution that combines monitoring network security with ensuring network application performance.

Customer challenges

Large enterprises have many branches all over the country, with huge business volume and complex network structure. A large number of concurrent business operations occur every minute, producing a large amount of network data.

One of the challenges is to pay equal attention to security monitoring and Performance Optimization: enterprises not only need to optimize network performance and ensure smooth network, but also must strengthen monitoring to prevent potential security risks at any time, which many solutions cannot do.

The second challenge is to give consideration to both wireless and wired networks: the intervention of a large number of mobile terminal devices makes the wireless network an indispensable part of the enterprise network. How to give consideration to the data security of both wired and wireless networks is the key to the feasibility of the solution.

The third challenge is to quickly solve the problem at the fault site: Although many network monitoring solutions can master the network situation of branches distributed everywhere, many times, if you want to solve the problem quickly, you need the full cooperation between the headquarters and the technicians at the fault site. At this time, field personnel need equipment that can quickly detect field faults.

Solution

1. Advantages of the scheme

This solution can take into account both wired and wireless networks, and uniformly manage and monitor them.

This solution can not only effectively avoid security vulnerabilities, prevent information leakage and prevent hacker attacks, but also provide help to optimize network performance, which is unmatched by other information security solutions.

The combination of overall monitoring and on-site detection makes this solution have the ability to comprehensively and quickly solve network problems.

Simple deployment, good scalability, ease of use and flexibility. These characteristics make this solution bring a surprising experience to relevant technicians when applied.

The combination of software and hardware enables the solution to obtain an ideal return on investment with low deployment cost.

2. Functional features

seven × 24-hour real-time monitoring of wireless and wired networks

Wired and wireless illegal device suppression

Fast and accurate detection, classification and positioning of illegal equipment

Abnormal traffic monitoring, port attack detection, sensitive information leakage tracking

Online behavior control, internal and external network access management

Illegal website access record and playback

Wireless attack detection and multiple notification and alarm functions

Security incident forensics and on-site security attack detection

Intelligent expert system guides users to solve complex security problems

3. Key products

It includes software and hardware, including both large-scale monitoring system and handheld portable equipment. The following describes the three key products that will be involved in this scheme.

Airmagnetenterprise wireless real-time monitoring and defense system

This system not only provides 7 × 24-hour Wi Fi network security and performance monitoring, as well as remote fault diagnosis function. At the same time, it can also quickly and accurately detect, classify and locate illegal devices, and then suppress illegal devices through wired and wireless ways. Based on the support of DTU function, airmagnetenterprise can ensure that the wireless threat database is updated in time. In addition, airmagnetenterprise is the only similar solution integrating spectrum analysis function in the market. It can quickly detect and analyze RF interference sources that affect the performance of Wi Fi network through hardware or software probes.

Networktimemachine massive online application analysis system

This system is a set of 7 × A multi-in-one solution for 24-hour real-time monitoring of wired network environment. It can store a large amount of network environment data, so that users can play back the current network state according to time, obtain evidence, analyze and find the root cause of the problem. Network managers can also control online behavior in real time through this set of solutions. It is worth mentioning that although networktimemachine contains multiple advanced functions, its deployment is extremely simple and can be connected to the target network plug and play.

In order to facilitate understanding, the network applied by this solution is divided into four areas, namely network management monitoring area, data center, wireless office access area and wired office access area.

Network management monitoring area

Network operation and maintenance personnel will manage and operate NTM and ame probes in this area through networktimemachine (hereinafter referred to as NTM in the figure) and airmagnetenterprise (hereinafter referred to as ame in the figure), understand the network operation status, obtain problem alarm information and issue defense strategies.